01
detectionlint / library / yara-l

network_connection_first_seen_in_past_day

yara-lApache-2.0from chronicle/detection-rules

Detect network connection to an ip address that was only seen for the first time in the past 24 hours

02
quality98
fp risk—
forks0
views0
rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in